From 97a23ad61153110127199c08d4cba453c77731a8 Mon Sep 17 00:00:00 2001
From: Nick Fawbert <nick.fawbert@codeenigma.com>
Date: Tue, 6 Feb 2024 15:55:01 +0000
Subject: [PATCH] r68152-secure-symfony-app-for-prod 2.x

---
 roles/debian/nginx/templates/symfony3_prod.j2 | 21 +++++++++++++++++++
 1 file changed, 21 insertions(+)
 create mode 100644 roles/debian/nginx/templates/symfony3_prod.j2

diff --git a/roles/debian/nginx/templates/symfony3_prod.j2 b/roles/debian/nginx/templates/symfony3_prod.j2
new file mode 100644
index 000000000..acf6f1fec
--- /dev/null
+++ b/roles/debian/nginx/templates/symfony3_prod.j2
@@ -0,0 +1,21 @@
+location / {
+    try_files $uri /app_{{ symfony_env }}.php$is_args$args;
+}
+
+# Prod only
+location ~ ^/(app_dev|config)\.php(/|$) {
+  fastcgi_pass {{ nginx.php_fastcgi_backend }};
+  fastcgi_split_path_info ^(.+\.php)(/.*)$;
+  include fastcgi_params;
+  fastcgi_param SCRIPT_FILENAME $realpath_root$fastcgi_script_name;
+  fastcgi_param DOCUMENT_ROOT $realpath_root;
+  internal;
+}
+
+location ~ \.php(/|$) {
+  fastcgi_pass {{ nginx.php_fastcgi_backend }};
+  fastcgi_split_path_info ^(.+\.php)(/.*)$;
+  include fastcgi_params;
+  fastcgi_param SCRIPT_FILENAME $realpath_root$fastcgi_script_name;
+  fastcgi_param DOCUMENT_ROOT $realpath_root;
+}